Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/tnYBAO8GGn2DnIKNmpPyR8gfXoc.roa
File: tnYBAO8GGn2DnIKNmpPyR8gfXoc.roa (raw, json)
Hash identifier: 1pZxRX1YivA3pBSHC9+e/i45jCWWN/9b87Q/TVdg39I=
Subject key identifier: B6:76:01:00:EF:06:1A:7D:83:9C:82:8D:9A:93:F2:47:C8:1F:5E:87
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 018CC348F27DEB64F355AB4B68ED3C92A7F5
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/tnYBAO8GGn2DnIKNmpPyR8gfXoc.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207910
IP address blocks: 2001:678:984::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f2:7d:eb:64:f3:55:ab:4b:68:ed:3c:92:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6760100ef061a7d839c828d9a93f247c81f5e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:ff:9d:4e:a1:ab:fa:b8:c4:42:8b:32:64:
20:48:fe:39:fe:df:40:aa:76:c5:f9:6e:45:7d:50:
b0:5d:38:19:50:71:ae:9f:17:46:66:db:43:5b:8a:
be:2c:b2:62:8a:a7:aa:b3:ee:1f:e4:42:ea:d6:73:
b8:92:01:4a:31:7d:0e:ad:75:63:f0:6f:68:a5:c8:
f5:ef:17:1b:43:a8:64:21:f6:bd:8a:74:f7:37:96:
48:51:ce:be:3e:f0:f9:2d:d6:89:a6:36:3f:06:53:
56:50:be:f9:cd:eb:97:d9:d6:63:b4:bd:6b:c4:2d:
d4:c2:34:95:06:48:0f:d3:cb:c3:0a:3c:33:63:9b:
46:08:1e:16:b4:24:ba:72:be:ad:c0:ed:99:e0:bf:
ef:7a:42:07:df:05:29:2a:37:20:35:24:ac:32:a6:
5e:48:c3:c4:ab:b0:7d:e7:ca:b3:e7:e0:f9:98:42:
84:d1:99:96:be:76:4d:eb:76:e8:a3:69:25:0c:3f:
ca:34:a4:cd:e8:78:56:79:52:7d:22:b4:08:73:86:
95:ac:43:cc:25:0a:9c:38:61:ba:5f:11:3f:86:a2:
c6:b6:91:0a:d7:8d:c9:67:05:21:ad:71:f6:1f:5f:
ec:76:34:59:3e:43:10:8c:29:7c:e8:fb:9b:6c:5b:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:01:00:EF:06:1A:7D:83:9C:82:8D:9A:93:F2:47:C8:1F:5E:87
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/tnYBAO8GGn2DnIKNmpPyR8gfXoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:984::/48
Signature Algorithm: sha256WithRSAEncryption
83:48:f1:97:e7:7f:47:04:89:58:dd:f0:83:96:f5:7e:b3:32:
96:2b:34:92:04:65:a2:04:18:6f:e0:d7:ae:c5:69:5f:2c:f7:
b3:68:ca:6d:4b:e2:af:cb:27:4f:94:a2:e1:e7:de:79:2e:79:
00:c7:25:ce:05:78:2a:bf:0d:2a:eb:11:5a:5f:bf:f8:dd:07:
7c:0a:26:e1:b5:fc:5a:63:ad:65:8a:2e:60:8d:21:6a:86:88:
02:1a:39:99:db:23:e7:c8:63:90:5b:a1:75:e0:bc:39:30:b8:
2a:60:5a:39:ec:e5:5a:06:a4:eb:69:a3:ac:87:4c:1f:26:ad:
34:c6:e2:e2:91:56:c5:4b:3c:5c:7c:e9:b7:3f:f9:b6:3a:9d:
b2:01:46:a5:e7:4b:b5:b0:3d:3b:39:2e:6b:56:71:11:1e:da:
50:29:e9:e3:29:4e:d4:bd:5c:f0:b3:25:24:4a:62:d9:8d:6a:
2d:4e:06:0f:4c:fc:aa:59:64:f7:a7:bc:b5:8a:73:42:aa:a7:
87:51:72:69:ea:4c:e3:52:5a:34:54:c2:59:f8:21:3b:39:b7:
26:0b:a9:71:81:8d:9d:46:76:c4:fa:41:a1:bf:0d:32:e4:5d:
7b:bf:7f:e4:08:89:a4:26:c7:78:87:b2:2b:71:2a:0f:8c:10:
de:b2:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:46 2025 by rpki-client